CVE-2006-4128

Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.

• http://secunia.com/advisories/21472Vendor Advisory
• http://securityreason.com/securityalert/1380
• http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html
• http://securitytracker.com/id?1016683
• http://seer.entsupport.symantec.com/docs/284623.htmVendor Advisory
• http://www.kb.cert.org/vuls/id/647796US Government Resource
• http://www.securityfocus.com/archive/1/443037/100/0/threaded
• http://www.securityfocus.com/bid/19479
• http://www.vupen.com/english/advisories/2006/3266
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28336
• http://secunia.com/advisories/21472Vendor Advisory
• http://securityreason.com/securityalert/1380
• http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html
• http://securitytracker.com/id?1016683
• http://seer.entsupport.symantec.com/docs/284623.htmVendor Advisory
• http://www.kb.cert.org/vuls/id/647796US Government Resource
• http://www.securityfocus.com/archive/1/443037/100/0/threaded
• http://www.securityfocus.com/bid/19479
• http://www.vupen.com/english/advisories/2006/3266
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28336

Published

Aug 14, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4122Simple one-file guestbook 1.0 and earlier allows remote atta…
• CVE-2006-4123PHP remote file inclusion vulnerability in boitenews4/index.…
• CVE-2006-4124The libXm library in LessTif 0.95.0 and earlier allows local…
• CVE-2006-4125Stack-based buffer overflow in main.c in DConnect Daemon 0.7…
• CVE-2006-4126The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 an…
• CVE-2006-4127Multiple format string vulnerabilities in DConnect Daemon 0.…
• CVE-2006-4129PHP remote file inclusion vulnerability in admin.webring.doc…
• CVE-2006-4130PHP remote file inclusion vulnerability in admin.remository.…
• CVE-2006-4131Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, a…
• CVE-2006-4132ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0…
• CVE-2006-4133Heap-based buffer overflow in SAP Internet Graphics Service …
• CVE-2006-4134Unspecified vulnerability related to a "design flaw" in SAP …